Because of the sensitive information and critical infrastructure they control, corporations are on the front lines of cyber defense. The impact of cybercrime goes well beyond the immediate loss of critical data or disruption of service, with downstream harm impacting not only the company and its board, but also the larger community of shareholders, customers, and other stakeholders. Effective corporate management of cyber risk is essential for societal stability and economic growth. Despite this critical responsibility, the continued growth in volume and severity of cyber attacks would indicate that most corporations are failing in this mission today even though many have devoted considerable investment to cyber security. Our experience indicates that, in general, no amount of technology, staffing or policies will reverse this course because cybersecurity is fundamentally suffering from a crisis of leadership that requires fundamental changes to organization, culture and capability to make lasting improvements in the management of cyber risk. At Archefact Group, we take an interdisciplinary approach to empower corporate boards to fulfill their cyber risk stewardship responsibilities so their companies are empowered to manage their cyber risks effectively. We accomplish this by bringing clarity, focus and reasoned experience to the process.